cve/2023/CVE-2023-32750.md

### [CVE-2023-32750](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32750)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the background. The job "remote-download" can be used to cause the backend to send a HTTP GET request to a specified URL and save the response to a new file. The response file is then available in a user-specified folder in Pydio Cells.

### POC

#### Reference
- https://www.redteam-pentesting.de/advisories/rt-sa-2023-005/
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses

#### Github
No PoCs found on GitHub currently.